Now that GICv2 is disabled in nVHE protected mode there should be no
other reason for the host to use create_hyp_io_mappings() or
kvm_phys_addr_ioremap(). Add sanity checks to make sure that assumption
remains true looking forward.
Signed-off-by: Quentin Perret <qperret@google.com>
Acked-by: Will Deacon <will@kernel.org>
Signed-off-by: Marc Zyngier <maz@kernel.org>
Link: https://lore.kernel.org/r/20211208152300.2478542-6-qperret@google.com
        unsigned long addr;
        int ret;
 
+       if (is_protected_kvm_enabled())
+               return -EPERM;
+
        *kaddr = ioremap(phys_addr, size);
        if (!*kaddr)
                return -ENOMEM;
                                     KVM_PGTABLE_PROT_R |
                                     (writable ? KVM_PGTABLE_PROT_W : 0);
 
+       if (is_protected_kvm_enabled())
+               return -EPERM;
+
        size += offset_in_page(guest_ipa);
        guest_ipa &= PAGE_MASK;